Delete FortiClient logs

Forum|Forum|9 years ago
February 10, 2017
5 replies
19096 views

Hello,

I want to delete FortiClient traffic logs stored on FortianAlyzer that are visible in Log View->Security->Fortclient_>Traffic. eventually all FortiClient logs.

Fortianalyzer v5.4.2-build1151 161213 (GA)

Fortclient v5.4

Best answer by hzhao_FTNT

To delete log files, please go to Log View->Log Browse

To delete logs in DB, just rebuild ADOM under CLI after log files deleted: exe sql-local rebuild-adom <adom-name>

regards,

hz

hzhao_FTNTAnswer

Staff

To delete log files, please go to Log View->Log Browse

To delete logs in DB, just rebuild ADOM under CLI after log files deleted: exe sql-local rebuild-adom <adom-name>

regards,

hz

kbar44Author

New Member

Thanks,

but I have Administrative domain set to OFF. Here is output of command exe sql-local rebuild-adom ?

<adom> Please input ADOM name: FortiCarrier FortiMail FortiAnalyzer FortiWeb FortiCache FortiClient Syslog FortiManager FortiSandbox FortiDDoS FortiAuthenticator root

Which option choose? exe sql-local rebuild-adom FortiAnalyzer or exe sql-local rebuild-adom root ?

regards

kbar44

kbar44Author

New Member

I do exe sql-local rebuild-adom root. Here is kb about rebuilding adom http://kb.fortinet.com/kb...do?externalID=FD36626.

kbar44Author

New Member

Success! Thank you for help

tsimeonov_FTNT

Staff

Hi, Amusing you would like to delete all FCTs' logs , it could be done from LogView/LogBrowse/<select ems log>->delete Please note a single EMS log may contain log messages of multiple FCT. By deleting EMS log file , you may delete logs from all depended FCTs.

GUI is also restricted to delete one log file at the time. If you need to delete multiple log files, the step needs to be repeated for each file

Sign up

Login with SSO

Login to the community

Login with SSO